windwalker/scalars

Repo bus factorcaution

All recent commits came from one contributor, creating maintainer concentration. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

The repository received one commit in the last 3 months from one active maintainer, indicating some current maintenance but a limited recent pace.

Repo toolingcaution

Composer is used for builds, but no security scanning tool is reported, leaving a modest repository hygiene gap.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response.

Workflow auditcaution

The workflow audit completed cleanly with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 3 action references are unpinned, so workflow dependencies are less reproducible.